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TN THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A method for identifying unsolicited electronic mail 
messages in a computer network, comprising: 

receiving an electronic mail message; 

removing non-static dat a including end-of-line characters and headers, from the 
electronic mail message; 

generating a checksum based on data remaining within the electronic mail message; 
comparing the generated checksum with a database containing checksums for 
previously identified unsolicited messages; and 

identifying the electronic message as an unsolicited message if the generated 
checksum matches one of the database checksums; 

wherein the non-static data is removed to prevent the non-static data from being 
subject to the checksum* so that non-static data does not compromise the 
identification of the electronic message as the unsolicited message . 

2. (Original) The method of claim 1 wherein generating a checksum comprises 
generating individual checksums for portions of the remaining data. 

3. (Original) The method of claim 2 wherein the portions comprise lines of data. 

4. (Original) The method of claim 2 wherein comparing a checksum comprises 
comparing checksums starting with one of the portions at the end of the remaining 
data and working backwards through the data. 

5. (Original) The method of claim 1 wherein removing non-static material 
comprises removing forwarding information. 

6. - 7. (Cancelled) 
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8. (Original) The method of claim 1 further comprising deleting the electronic mail 
message if the message is identified as an unsolicited message. 

9. (Original) The method of claim 1 ftirther comprising at least temporarily storing 
the electronic message if the message is identified as an unsolicited message. 

10. (Original) The method of claim 1 further comprising forwarding the electronic 
message to an intended recipient if the message is not identified as an unsolicited 
message. 

1 1 . (Original) The method of claim 1 further comprising updating the database with 
new checksums. 

12. (Original) The method of claim 1 1 wherein the database is updated based on 
checksums generated from electronic messages received and identified as an 
unsolicited message. 

13. (Currently Amended) A system for identifying unsolicited electronic mail 
messages in a computer network, comprising: 

a message modifier operable to remove non-static data including end-of-line 
characters and headers, from an electronic mail message; 

a checksum generator operable to generate a checksum based on data remaining 
within the electronic mail message; 

a database containing checksums previously identified for unsolicited messages; and 
a detector operable to compare the generated checksum with the database and 
identify the electronic message as an unsolicited message if the generated checksum 
matches one of the database checksums: 

wherein the non-static data is removed to prevent the non-static data from being 
subject to the checksum* so that non-static data does not compromise the 
identification of the electronic message as the unsolicited message . 
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14. (Original) The system of claim 13 wherein the detector is configured to generate 
individual checksums for portions of the remaining data. 

1 5. (Original) The system of claim 14 wherein the portions comprise lines of data. 

1 6. (Original) The system of claim 14 wherein the detector is configured to compare 
the generated checksums starting with one of the portions at the end of the data and 
working backwards through the data. 

17. (Original) The system of claim 13 wherein the database is configured to receive 
updates. 

18. (Currently Amended) A computer program product for identifying unsolicited 
electronic mail messages in a computer network, comprising: 

code that receives an electronic mail message; 

code that removes non-static dat a including end-of-line charact ers and headers, from 
the electronic mail message; 

code that generates a checksum based on data remaining within the electronic mail 
message; 

code that compares the generated checksum with a database containing checksums 
for previously identified unsolicited messages; 

code that identifies the electronic message as an unsolicited message if the generated 

checksum matches one of the database checksums; and 

a computer readable medium that stores said computer codes; 

wherein the non-static data is removed to prevent the non-static data from being 

subject to the checksum, so that non-static data does no t compromise the 

identification of the electronic message as the unsolic ited message. 

19. (Currently Amended) The computer product of claim 18 wherein the computer 
readable medium is selected from the group consisting of CD-ROM, floppy disk, 
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tape, flash memor}', system memory, and hard drive r and Q data signal embodied m a 
earrier^vave. 

20. (Original) The computer product of claim 1 8 further comprising code that 
generates individual checksums for portions of the remaining data. 

21 . (Original) The computer product of claim 20 further comprising code that 
compares the generated checksums starting with one of the portions at the end of the 
data and works backwards through the data. 

22. (New) The method of claim 5 wherein the forwarding information includes a 
character. 

23. (New) The method of claim 4 wherein the comparing starts with one of the 
portions at the end of the remaining data and works backwards through the data, in 
order to reduce required processing. 

24. (New) The method of claim 1 wherein the non-static data is removed prior to 
the checksum being generated. 

25. (New) The method of claim 1 wherein the non-static data is removed to prevent 
the non-static data from being subject to the checksum, so that non-static data forged 
by spammers does not compromise the identification of the electronic message as 
the unsolicited message. 
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